$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: Jo3qNndarHe569PaWVDFvfcmvqT2T8TG1CaZPnvy5OI= Subject key identifier: 77:92:C9:16:57:22:68:3E:BA:E5:AB:3F:14:DF:A2:43:96:86:3D:DA Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 0B1CEB12EB631CD371509902EF688D472A25E4FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:07:44 +0000 Manifest this update: Wed 17 Jun 2026 04:02:44 +0000 Manifest next update: Thu 18 Jun 2026 06:31:44 +0000 Files and hashes: 1: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) 2: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) 3: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: N9g/Wr1HHumh3yi05DOvXgqsuiP+BxkroO/X5c2YZUQ=) 4: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1c:eb:12:eb:63:1c:d3:71:50:99:02:ef:68:8d:47:2a:25:e4:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: Jun 17 04:02:44 2026 GMT Not After : Jun 18 06:31:44 2026 GMT Subject: CN=7792C9165722683EBAE5AB3F14DFA24396863DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:97:7b:6d:5f:57:5b:dd:9f:ae:bc:bd:86: 23:54:40:b6:cf:fc:b4:d9:33:ee:c9:92:9d:0d:e3: bb:c4:ed:74:65:66:c7:5f:93:93:b9:a8:e0:81:fd: 5c:6f:6c:d7:be:46:e2:d6:05:35:6d:97:dd:06:2f: a8:76:de:90:c5:30:d3:f8:f1:27:64:df:51:c4:fc: fb:fd:73:3b:09:ad:e0:72:d2:0d:96:b3:c2:8c:9d: a0:6e:0d:40:93:94:3c:de:a3:67:d7:f2:11:ee:67: 5c:b2:eb:52:62:a8:15:2e:ee:09:67:f4:b2:83:42: 70:5f:fd:37:0c:5f:63:b5:cb:19:eb:03:8a:14:2c: 8f:1a:1d:70:fe:55:20:d5:c3:77:64:4b:15:6a:8a: 83:4f:4f:8e:42:0b:6b:4e:0b:a2:84:cb:3e:56:07: 39:4b:e8:c7:f3:da:41:2f:24:b7:68:02:39:8b:b4: 1b:07:01:eb:ae:6a:5f:9b:bb:3b:a9:62:bc:88:13: 9b:88:d1:09:d2:bb:3d:98:ea:8a:fe:04:e4:1b:0a: 3c:85:60:cb:25:54:03:5b:0c:4c:13:fa:0e:f2:fd: d7:ba:da:50:22:52:2e:d0:b5:cf:f4:40:ba:13:d2: 45:5e:66:ca:6d:6d:12:c8:2e:78:30:ad:64:0e:30: eb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:92:C9:16:57:22:68:3E:BA:E5:AB:3F:14:DF:A2:43:96:86:3D:DA X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:82:c7:25:6e:96:b5:fe:fe:86:29:40:f1:ff:a4:5b:ff:21: c3:31:9b:43:8d:e2:d2:4b:2f:a3:29:35:58:3e:db:2d:d4:65: 9e:7e:9f:2c:36:48:eb:60:bf:04:15:1e:e5:2a:3b:c2:fc:42: ac:3b:fa:9b:33:0c:bf:9e:25:06:18:d7:26:7d:42:69:9f:7d: 50:33:8e:e1:18:80:a0:0d:92:fb:ab:e2:67:cf:34:1a:ee:b3: 42:95:01:f0:ed:80:b2:35:28:40:ed:ba:25:1b:78:f8:fe:72: e0:dd:86:68:8e:b7:fb:8f:94:02:eb:2b:9c:0e:e4:cc:72:95: 1f:57:0a:ef:90:8d:27:48:a6:e7:9c:6e:63:2b:b0:1e:2e:c9: 9f:c9:24:9b:2a:6f:86:34:96:ad:0e:29:4d:18:30:d3:b6:6f: bb:aa:33:b4:f4:8e:87:89:e2:ee:a1:de:b3:29:e2:25:6f:6e: d5:53:4b:39:ba:88:44:44:b6:70:1c:ea:91:2d:37:da:3e:00: 74:8e:a6:0c:89:73:ac:15:af:b1:95:59:42:a7:eb:5f:43:fe: 5c:53:e0:e4:95:84:d6:95:7b:2b:7c:d8:b6:ae:6a:24:b3:76: 75:df:3f:09:11:c8:bd:5a:15:6f:16:5e:fa:49:6b:79:41:5a: af:d4:42:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxzrEutjHNNxUJkC72iNRyol5P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjA2MTcwNDAyNDRaFw0yNjA2MTgwNjMxNDRaMDMxMTAvBgNV BAMTKDc3OTJDOTE2NTcyMjY4M0VCQUU1QUIzRjE0REZBMjQzOTY4NjNEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6Jd7bV9XW92frry9hiNUQLbP /LTZM+7Jkp0N47vE7XRlZsdfk5O5qOCB/VxvbNe+RuLWBTVtl90GL6h23pDFMNP4 8Sdk31HE/Pv9czsJreBy0g2Ws8KMnaBuDUCTlDzeo2fX8hHuZ1yy61JiqBUu7gln 9LKDQnBf/TcMX2O1yxnrA4oULI8aHXD+VSDVw3dkSxVqioNPT45CC2tOC6KEyz5W BzlL6Mfz2kEvJLdoAjmLtBsHAeuual+buzupYryIE5uI0QnSuz2Y6or+BOQbCjyF YMslVANbDEwT+g7y/de62lAiUi7Qtc/0QLoT0kVeZsptbRLILngwrWQOMOvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd5LJFlciaD665as/FN+iQ5aGPdowHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuCxyVulrX+/oYpQPH/pFv/IcMxm0ON4tJL L6MpNVg+2y3UZZ5+nyw2SOtgvwQVHuUqO8L8Qqw7+pszDL+eJQYY1yZ9QmmffVAz juEYgKANkvur4mfPNBrus0KVAfDtgLI1KEDtuiUbePj+cuDdhmiOt/uPlALrK5wO 5MxylR9XCu+QjSdIpuecbmMrsB4uyZ/JJJsqb4Y0lq0OKU0YMNO2b7uqM7T0joeJ 4u6h3rMp4iVvbtVTSzm6iEREtnAc6pEtN9o+AHSOpgyJc6wVr7GVWUKn619D/lxT 4OSVhNaVeyt82LauaiSzdnXfPwkRyL1aFW8WXvpJa3lBWq/UQjg= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:44 2026 by rpki-client